WIP: New hugo security policy by jnavila · Pull Request #2225 · git/git-scm.com · GitHub
Skip to content

WIP: New hugo security policy - #2225

Open
jnavila wants to merge 2 commits into
gh-pagesfrom
new_hugo
Open

jnavila wants to merge 2 commits into
gh-pagesfrom
new_hugo

Conversation

@jnavila

@jnavila jnavila commented Oct 11, 2026

Copy link
Copy Markdown
Contributor

Changes

Change the names of source files to .md in order to please Hugo security checks.

Context

Since version 0.162.0, Hugo no longer accepts html input files as inputs for security reasons, where a XSS could be injected.

The latest changes in hugo implement refusing the use of html files in
the content directory for security reasons. We convert the files to
markdown instead.

Signed-off-by: Jean-Noël Avila <jn.avila@free.fr>
Signed-off-by: Jean-Noël Avila <jn.avila@free.fr>

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The */af/* files are marked new, here, probably because #2188 was not merged yet. @jnavila do you maybe want to keep these added files out of this here PR, then?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oups.... a mix up. will reroll.

@dscho dscho left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you so much for this effort!

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants